/// <summary>
/// 获取角色可（查看、编辑、删除）模块中哪些组织下的数据，返回可（查看、编辑、删除）
/// 的组织Id集合字典，
/// 第一个参数为组织Id，第二个参数为是否来自父角色的权限，非当前
/// 角色的权限
/// </summary>
/// <param name="roleId">角色Id</param>
/// <param name="moduleId">模块Id</param>
/// <param name="dataPermissionType">数据权限类型,0-查看，1-编辑，2-删除</param>
/// <param name="read">是否为应用读取</param>
/// <returns>返回组织Id集合字典</returns>
public Dictionary <string, bool> GetRoleDataPermissions(Guid roleId, Guid moduleId, int dataPermissionType, bool read = false)
{
string errMsg = string.Empty;
Dictionary <string, bool> dic = new Dictionary <string, bool>();
//取当前角色的数据权限
Sys_PermissionData permissionData = this.GetEntity(out errMsg, x => x.Sys_RoleId == roleId && x.Sys_ModuleId == moduleId && !x.IsDeleted);
string orgIdsStr = string.Empty;
if (permissionData != null)
{
orgIdsStr = dataPermissionType == 0 ? permissionData.CanViewOrgIds :
(dataPermissionType == 1 ? permissionData.CanEditOrgIds : permissionData.CanDelOrgIds);
}
if (!string.IsNullOrWhiteSpace(orgIdsStr))
{
string[] token = orgIdsStr.Split(",".ToCharArray(), StringSplitOptions.RemoveEmptyEntries);
if (read && token.Contains("-1"))
{
dic.Add("-1", false);
return(dic);
}
foreach (string orgId in token)
{
dic.Add(orgId, false);
}
}
//取父角色的数据权限
List <Guid> parentsRoleIds = ObjectReferenceClass.GetParentsRoleId(roleId); //获取所有父角色
foreach (Guid tempRoleId in parentsRoleIds)
{
Sys_PermissionData tempPermission = this.GetEntity(out errMsg, x => x.Sys_RoleId == tempRoleId && x.Sys_ModuleId == moduleId && !x.IsDeleted);
string tempOrgIdsStr = string.Empty;
if (tempPermission != null)
{
tempOrgIdsStr = dataPermissionType == 0 ? tempPermission.CanViewOrgIds :
(dataPermissionType == 1 ? tempPermission.CanEditOrgIds : tempPermission.CanDelOrgIds);
}
if (!string.IsNullOrWhiteSpace(tempOrgIdsStr))
{
string[] token = tempOrgIdsStr.Split(",".ToCharArray(), StringSplitOptions.RemoveEmptyEntries);
if (read && token.Contains("-1"))
{
dic.Add("-1", false);
return(dic);
}
foreach (string orgId in token)
{
if (dic.ContainsKey(orgId))
{
continue;
}
dic.Add(orgId, true);
}
}
}
return(dic);
}
/// <summary>
/// 获取角色（查看、新增、编辑）字段权限，返回允许（查看、新增、编辑）的字段名字典，
/// 第一个参数为字段名，第二个参数为是否来自父角色的权限，
/// 非当前角色权限
/// </summary>
/// <param name="roleId">角色Id</param>
/// <param name="moduleId">模块Id</param>
/// <param name="fieldPermissionType">字段权限类型,0-查看，1-新增，2-编辑</param>
/// <param name="read">是否为应用读取，应用读取快速返回</param>
/// <returns>返回允许（查看、新增、编辑）的字段名字典</returns>
public Dictionary <string, bool> GetRoleFieldPermissions(Guid roleId, Guid moduleId, int fieldPermissionType, bool read = false)
{
string errMsg = string.Empty;
Dictionary <string, bool> dic = new Dictionary <string, bool>();
//取当前角色的字段权限
Sys_PermissionField permissionField = this.GetEntity(out errMsg, x => x.Sys_RoleId == roleId && x.Sys_ModuleId == moduleId && !x.IsDeleted);
string fields = string.Empty;
if (permissionField != null)
{
fields = fieldPermissionType == 0 ? permissionField.CanViewFields :
(fieldPermissionType == 1 ? permissionField.CanAddFields : permissionField.CanEditFields);
}
if (!string.IsNullOrWhiteSpace(fields))
{
string[] token = fields.Split(",".ToCharArray(), StringSplitOptions.RemoveEmptyEntries);
if (read && token.Contains("-1")) //应用读取
{
dic.Add("-1", false);
return(dic);
}
foreach (string field in token)
{
dic.Add(field, false);
}
}
//取父角色的字段权限
List <Guid> parentsRoleIds = ObjectReferenceClass.GetParentsRoleId(roleId); //获取所有父角色
foreach (Guid tempRoleId in parentsRoleIds)
{
Sys_PermissionField tempPermission = this.GetEntity(out errMsg, x => x.Sys_RoleId == tempRoleId && x.Sys_ModuleId == moduleId && !x.IsDeleted);
string tempFields = string.Empty;
if (tempPermission != null)
{
tempFields = fieldPermissionType == 0 ? tempPermission.CanViewFields :
(fieldPermissionType == 1 ? tempPermission.CanAddFields : tempPermission.CanEditFields);
}
if (!string.IsNullOrWhiteSpace(tempFields))
{
string[] token = tempFields.Split(",".ToCharArray(), StringSplitOptions.RemoveEmptyEntries);
foreach (string field in token)
{
if (dic.ContainsKey(field))
{
continue;
}
dic.Add(field, true);
}
}
}
return(dic);
}
/// <summary>
/// 获取角色功能权限，子角色默认继承父角色的所有权限，当前返回字典，
/// 字典第一个参数为功能Id（菜单或按钮Id）,第二个参数为是否该功能Id继承父角色，
/// 非当前角色所有
/// </summary>
/// <param name="roleId">角色Id</param>
/// <param name="functionType">功能类型，菜单或网格按钮,0-菜单，1-按钮</param>
/// <param name="moduleId">模块ID，针对按钮需要</param>
/// <returns>返回功能Id、是否来自父角色的权限字典</returns>
public Dictionary <Guid, bool> GetRoleFunPermissions(Guid roleId, int functionType, Guid?moduleId)
{
string errMsg = string.Empty;
//取当前角色的功能权限
Expression <Func <Sys_PermissionFun, bool> > exp = x => x.Sys_RoleId == roleId && x.FunType == functionType && x.IsDeleted == false;
if (functionType == 1 && moduleId.HasValue)
{
string mId = moduleId.Value.ToString().ToUpper();
Expression <Func <Sys_PermissionFun, bool> > tempExp = x => x.Des == mId;
exp = ExpressionExtension.And <Sys_PermissionFun>(exp, tempExp);
}
List <Sys_PermissionFun> permissionFuns = this.GetEntities(out errMsg, exp, null, false);
Dictionary <Guid, bool> dic = new Dictionary <Guid, bool>();
if (permissionFuns != null && permissionFuns.Count > 0)
{
List <Guid> funIds = permissionFuns.Select(x => x.FunId).Distinct().ToList();
dic = funIds.ToDictionary(x => x, y => false);
}
//取所有父角色的功能权限
List <Guid> parentsRoleIds = ObjectReferenceClass.GetParentsRoleId(roleId); //获取所有父角色
foreach (Guid tempRoleId in parentsRoleIds)
{
List <Sys_PermissionFun> tempFuns = this.GetEntities(out errMsg, x => x.Sys_RoleId == tempRoleId && x.FunType == functionType && !x.IsDeleted, null, false);
if (tempFuns != null && tempFuns.Count > 0)
{
List <Guid> funIds = tempFuns.Select(x => x.FunId).ToList();
foreach (Guid funId in funIds)
{
if (dic.Keys.Contains(funId))
{
continue;
}
dic.Add(funId, true);
}
}
}
return(dic);
}
